[TOOL] Taranis, Switch Specific Sniffer
From: support@securiteam.comDate: 08/22/01
- Previous message: support@securiteam.com: "[NT] Dynu FTP Server Directory Traversal Vulnerability"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: support@securiteam.com To: list@securiteam.com Subject: [TOOL] Taranis, Switch Specific Sniffer Message-Id: <20010822111945.D7CED138BF@mail.der-keiler.de> Date: Wed, 22 Aug 2001 13:19:45 +0200 (CEST)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
When was the last time you checked your server's security?
How about a monthly report?
http://www.AutomatedScanning.com - Know that you're safe.
- - - - - - - - -
Taranis, Switch Specific Sniffer
------------------------------------------------------------------------
DETAILS
Taranis is a tool that demonstrates the necessity of strong cryptography
and authentication on local Ethernet networks. Taranis will steal username
/ password pairs by redirecting traffic intended for the POP or IMAP
server to the host running Taranis. Once this is achieved, the login
information is saved to a file.
Taranis redirects traffic on switch hardware by sending spoofed Ethernet
traffic. This is not the same as an ARP poisoning attack as it affects
only the switch, and does not rely on ARP packets. In addition, it is
virtually invisible because the packets it sends are not seen on any other
port on the switch. Evading detection by an IDS that may be listening on a
monitoring port is as simple as changing the type of packet that is sent
by the packet spoofing thread.
ADDITIONAL INFORMATION
The tool can be downloaded from:
<http://www.bitland.net/taranis/> http://www.bitland.net/taranis/
The information has been provided by <mailto:jwilkins@bitland.net>
Jonathan Wilkins.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Previous message: support@securiteam.com: "[NT] Dynu FTP Server Directory Traversal Vulnerability"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
